CVE-2017-14496

Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote…

published October 2, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS

—

EPSS

69%

Percentile

99.4

In the wild

Unconfirmed

What it is

Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.69356 · 99.4th percentile
Published: 2017-10-02T21:00Z

EPSS history

Timeline

02 OCT 21:00Z
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote…
cvelistv5